Must Have :

- 3 - 6 years of IT/engineering experience, with 2 - 3 years of hands-on AWS (EC2, S3, IAM, VPC, Lambda, RDS, EKS/ECS, CloudWatch) and solid networking fundamentals (subnets, routing, DNS, load balancers)

- Basic working knowledge of Microsoft Azure - Virtual Machines, Storage, Resource Groups, and Networking

- Hands-on experience with Microsoft Entra ID (Conditional Access, MFA, SSO) and M365 administration (Exchange Online, Teams, SharePoint, licencing, tenant security)

- Experience with MDM platforms (Jamf or Microsoft Intune) and Apple Business Manager (ABM) for device enrolment and app distribution

- Hands-on experience with XDR/EDR platforms - CrowdStrike Falcon strongly preferred

- Experience with code security tools - Snyk, Aikido, or equivalent SAST/SCA platforms

- Proficiency in IaC (Terraform preferred) and CI/CD pipeline management (GitHub Actions, Jenkins, or AWS CodePipeline)

- Scripting skills in Python and/or Bash; familiarity with containerisation (Docker, Kubernetes/EKS)

- Strong troubleshooting, root cause analysis, and security incident response capabilities

Good to Have :

- AWS Certifications (Solutions Architect, SysOps, or Security Specialty) and/or Microsoft Certifications (AZ-104 or MS-102)

- Experience with multi-account AWS environments (AWS Organizations, Control Tower) and secrets management (AWS Secrets Manager, HashiCorp Vault)

- Familiarity with observability tools (Datadog, Prometheus, Grafana) and compliance frameworks (SOC 2, ISO 27001, NIST, CIS Benchmarks)

- Experience with cross-platform identity federation and SSO across AWS, Azure, and M365 environments